A critical out-of-bounds write vulnerability in Foxit PDF Editor and Reader could allow an attacker to achieve arbitrary code execution via a malicious PDF file.

The application is susceptible to an out-of-bounds write (CWE-787) when parsing malformed Unity 3D objects. Exploitation requires user interaction, such as opening a specially crafted PDF file, and does not require prior authentication.

Successful exploitation of this vulnerability could lead to a full system compromise, including unauthorized data access and the execution of arbitrary code with the privileges of the logged-in user. Given the CVSS score of 7.8, this represents a significant risk to organizational endpoints, particularly if the application is used to process untrusted documents regularly.

Immediate Action: Review the official Foxit security bulletin and apply the latest available patches or version upgrades provided by the vendor.

Proactive Monitoring: Monitor endpoint logs for suspicious child processes spawned by the PDF application and implement application control policies to restrict document processing.

Compensating Controls: Use Group Policy or endpoint security software to disable 3D object rendering features within PDF viewers if they are not required for business operations.

Public Exploit Available: false

This vulnerability poses a substantial risk to user workstations by enabling potential remote code execution through document manipulation. Organizations should prioritize patching all instances of Foxit PDF Editor and Reader across the enterprise to mitigate the risk of exploitation.